Path Traversal Vulnerability in TeamCity Allows Limited Admin Actions

CVE-2024-27199

7.3HIGH

Key Information

Vendor
Jetbrains
Status
Teamcity
Vendor
CVE Published:
4 March 2024
📰 News Worthy

Summary

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

Affected Version(s)

TeamCity 0 < 2023.11.4

News Articles

favicon imageSC Media

JetBrains patches new TeamCity authentication bypass bugs

TeamCity servers risk being exposed to “complete compromise” if patch isn’t installed, researchers warned.

6 months ago

favicon imagethecyberthrone.in

PravinKarthik

Read all of the posts by PravinKarthik on TheCyberThrone

9 months ago

favicon imageTrend Micro

TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types

CVE-2024-27198 and CVE-2024-27199 are vulnerabilities within the TeamCity On-Premises platform that can allow attackers to gain administrative control over affected systems.

9 months ago

References

https://www.jetbrains.com/privacy-security/issues-fixed/
https://www.darkreading.com/cyberattacks-data-breaches/je...

EPSS Score

1% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by Help Net Security

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database12 News Article(s)
.